vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-04-20 19:09:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Make saving IP and CNAMEs more defensive

Browse source
This commit is contained in:
Daniel 2024-11-12 15:13:44 +01:00
parent 07acb9befa
commit f4b96e1ce7
2 changed files with 4 additions and 4 deletions
service
firewall
dns.go
nameserver
nameserver.go

6
service/firewall/dns.go
View file

@ -302,11 +302,11 @@ func UpdateIPsAndCNAMEs(q *resolver.Query, rrCache *resolver.RRCache, conn *netw
Expires: rrCache.Expires, Expires: rrCache.Expires,
} }
// Resolve all CNAMEs in the correct order and add the to the record. // Resolve all CNAMEs in the correct order and add the to the record - up to max 50 layers.
domain := q.FQDN domain := q.FQDN
for { for range 50 {
nextDomain, isCNAME := cnames[domain] nextDomain, isCNAME := cnames[domain]
if !isCNAME { if !isCNAME || nextDomain == domain {
break break
} }

2
service/nameserver/nameserver.go
View file

@ -224,8 +224,8 @@ func handleRequest(ctx context.Context, w dns.ResponseWriter, request *dns.Msg)
} }
// Save the request as open, as we don't know if there will be a connection or not. // Save the request as open, as we don't know if there will be a connection or not.
network.SaveOpenDNSRequest(q, rrCache, conn)
firewall.UpdateIPsAndCNAMEs(q, rrCache, conn) firewall.UpdateIPsAndCNAMEs(q, rrCache, conn)
network.SaveOpenDNSRequest(q, rrCache, conn)
case network.VerdictUndeterminable: case network.VerdictUndeterminable:
fallthrough fallthrough